modified secret_token